IoT Authentication Proofs That Prevent Device Key Leakage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT device authentication methods require key information transmission over public networks, leading to potential leakage and security risks.
Innovation Solution
A device authentication method utilizing random data and zero-knowledge proof circuits to generate and verify authentication proofs, eliminating the need for key information transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key information is transmitted over public network for authentication, then authentication can be performed, but key information may be leaked during transmission
Solution Approach 1:
The patent introduces an authentication proof as an intermediary element between the IoT device and authentication server. Instead of transmitting sensitive key information directly, the device generates an authentication proof based on its key and transmits this proof to the server for verification. The authentication proof serves as a mediator that enables authentication without exposing the underlying key information, thus resolving the contradiction between achieving authentication and preventing key leakage.
Solution Approach 2:
The patent creates a copy of the authentication mechanism through the authentication proof. Rather than transmitting the original key information, a derived authentication proof is transmitted instead. This proof contains sufficient information for the authentication server to verify the device's identity without revealing the actual key. The authentication proof is essentially a safe copy that enables verification while preserving key security.
2Ease of operation
If device key information is sent to authentication server, then authentication can be verified, but information security is compromised during transmission
Solution Approach 1:
The authentication proof acts as an intermediary that enables authentication verification without transmitting device key information. The proof is generated locally at the device using its key and random data, then transmitted to the authentication server. The server verifies the proof using the device's public information and random data, confirming authentication while the key never leaves the device, thus preventing information loss during transmission.
Solution Approach 2:
The patent extracts the essential authentication verification function from the key information transmission process. By separating the authentication logic into a standalone proof verification mechanism, the system can perform authentication verification without requiring the transmission of key information. The authentication proof contains only the necessary verification data, extracting the authentication function while removing the sensitive key transmission requirement.
Data Source
AI summary
The present disclosure relates to a device authentication method and system, an IoT device, and an authentication server. The method includes: obtaining random data; obtaining public input parameters including the random data, and generating an authentication proof based on a preset proof parameter and the public input parameters; sending the authentication proof to an authentication server, such that the authentication server verifies the authentication proof based on a preset verification parameter to obtain an authentication result; obtaining the authentication result returned by the authentication server. This embodiment can use authentication proof without the need to use device key information for authentication, improving authentication security. Moreover, the authentication server is unable to restore device key information based on the authentication proof, further avoiding leakage of the device key information and improving information security.